CVE-2023-50459

TYPO3 / femanager PUBLISHED

Description (CNA)

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various frontend user accounts.

Affected (CNA)

Vendor / product	Versions
TYPO3 / femanager	affected 7.0.0 before 7.2.3

CWE

CWE-863

References

https://typo3.org/security/advisory/typo3-ext-sa-2023-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.